Critical vulnerability archive — page 558

mitre20 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2023-31983 · mitre

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the…

EPSS 25%public exploit CVSS 9.8

CVE-2023-30330 · mitre

SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42300/generic/gn_de…

EPSS 6%public exploit CVSS 9.8

CVE-2023-31902 · mitre

RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution (RCE).

EPSS 9%public exploit CVSS 9.8

CVE-2023-31985 · mitre

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the…

EPSS 8%public exploit CVSS 9.8

CVE-2023-31986 · mitre

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the…

EPSS 8%public exploit CVSS 9.8

CVE-2023-31587 · mitre

Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/Wr…

EPSS 2%public exploit CVSS 9.8

CVE-2023-31903 · mitre

GuppY CMS 6.00.10 is vulnerable to Unrestricted File Upload which allows remote attackers to execute arbitrary code by uploading a php file.

EPSS 2%public exploit CVSS 9.8

CVE-2023-29861 · mitre

An issue found in FLIR-DVTEL version not specified allows a remote attacker to execute arbitrary code via a crafted request to the manage…

EPSS 2%public exploit CVSS 9.8

CVE-2023-29862 · mitre

An issue found in Agasio-Camera device version not specified allows a remote attacker to execute arbitrary code via the check and authLev…

EPSS 2%public exploit CVSS 9.8

CVE-2023-31703 · mitre

Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacke…

EPSS 4%public exploit CVSS 9.0

CVE-2023-30245 · mitre

SQL injection vulnerability found in Judging Management System v.1.0 allows a remote attacker to execute arbitrary code via the crit_id p…

EPSS 1%public exploit CVSS 9.8

CVE-2023-30247 · mitre

File Upload vulnerability found in Oretnom23 Storage Unit Rental Management System v.1.0 allows a remote attacker to execute arbitrary co…

EPSS 1%public exploit CVSS 9.8

CVE-2023-31857 · mitre

Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution.

EPSS 2%public exploit CVSS 9.8

CVE-2023-31890 · mitre

An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode(…

EPSS 1%public exploit CVSS 9.8

CVE-2023-30189 · mitre

Prestashop posstaticblocks <= 1.0.0 is vulnerable to SQL Injection via posstaticblocks::getPosCurrentHook().

EPSS 0.8%public exploit CVSS 9.8

CVE-2023-30191 · mitre

PrestaShop cdesigner < 3.1.9 is vulnerable to SQL Injection via CdesignerTraitementModuleFrontController::initContent().

EPSS 0.8%public exploit CVSS 9.8

CVE-2023-31519 · mitre

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the email parameter at login_core.php.

EPSS 0.9%public exploit CVSS 9.8

CVE-2023-31856 · mitre

A command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594_B20200910 allow…

EPSS 3%CVSS 9.8

CVE-2023-29961 · mitre

D-Link DIR-605L firmware version 1.17B01 BETA is vulnerable to stack overflow via /goform/formTcpipSetup,

EPSS 1%CVSS 9.8

CVE-2023-27742 · mitre

IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login.

EPSS 0.9%CVSS 9.8

patriksimek1 vulnerability on this pageMax CVSS 10.0Priority 59KEV 0

CVE-2023-32314 · patriksimek vm2

Sandbox Escape

EPSS 8%public exploit CVSS 10.0

mlflow1 vulnerability on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2023-2780 · mlflow mlflow/mlflow

Path Traversal: '\..\filename' in mlflow/mlflow

EPSS 6%public exploit CVSS 9.8

Unknown2 vulnerabilities on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2023-0600 · Unknown WP Visitor Statistics (Real Time Traffic)

WP Visitor Statistics (Real Time Traffic) < 6.9 - Unauthenticated SQLi

EPSS 4%public exploit CVSS 9.8

CVE-2022-4774 · Unknown Bit Form

Bit Form < 1.9 - RCE via Unauthenticated Arbitrary File Upload

EPSS 2%public exploit CVSS 9.8

H3C1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2023-2676 · H3C R160

H3C R160 aspForm stack-based overflow

EPSS 1.0%public exploit CVSS 9.8

WAGO1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-1698 · WAGO Compact Controller CC100

WAGO: WBM Command Injection in multiple products

EPSS 82%CVSS 9.8

WPDeveloper1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-32243 · WPDeveloper Essential Addons for Elementor

WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation

EPSS 76%CVSS 9.8

SDG Technologies1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2023-1934 · SDG Technologies PnPSCADA

The PnPSCADA system, a product of SDG Technologies CC, is afflicted by a critical unauthenticated error-based PostgreSQL Injection vulner…

EPSS 8%CVSS 9.8

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2022-47937 · Apache Software Foundation org.apache.sling.commons.json

Multiple parsing problems in the Apache Sling Commons JSON module

EPSS 2%CVSS 9.8

Caton1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2023-2682 · Caton Live

Caton Live Mini_HTTPD ping.cgi command injection

EPSS 2%CVSS 9.8

metagauss1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2023-2499 · metagauss RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login

RegistrationMagic <= 5.2.1.0 - Authentication Bypass

EPSS 1%CVSS 9.8

Synology1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2023-32956 · Synology Synology Router Manager (SRM)

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in CGI component in Synology Rou…

EPSS 2%CVSS 9.8

redhat1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-2319 · redhat

It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to inc…

EPSS 1.0%CVSS 9.8

SourceCodester10 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-2668 · SourceCodester Lost and Found Information System

SourceCodester Lost and Found Information System GET Parameter manager_category sql injection

EPSS 0.8%CVSS 9.8

CVE-2023-2669 · SourceCodester Lost and Found Information System

SourceCodester Lost and Found Information System GET Parameter sql injection

EPSS 0.8%CVSS 9.8

CVE-2023-2672 · SourceCodester Lost and Found Information System

SourceCodester Lost and Found Information System GET Parameter view.php sql injection

EPSS 0.8%CVSS 9.8

CVE-2023-2693 · SourceCodester Online Exam System

SourceCodester Online Exam System POST Parameter data sql injection

EPSS 0.8%CVSS 9.8

CVE-2023-2694 · SourceCodester Online Exam System

SourceCodester Online Exam System POST Parameter data sql injection

EPSS 0.8%CVSS 9.8

CVE-2023-2695 · SourceCodester Online Exam System

SourceCodester Online Exam System POST Parameter data sql injection

EPSS 0.8%CVSS 9.8

CVE-2023-2696 · SourceCodester Online Exam System

SourceCodester Online Exam System POST Parameter data sql injection

EPSS 0.8%CVSS 9.8

CVE-2023-2697 · SourceCodester Online Exam System

SourceCodester Online Exam System POST Parameter data sql injection

EPSS 0.8%CVSS 9.8

CVE-2023-2698 · SourceCodester Lost and Found Information System

SourceCodester Lost and Found Information System GET Parameter sql injection

EPSS 0.8%CVSS 9.8

CVE-2023-2699 · SourceCodester Lost and Found Information System

SourceCodester Lost and Found Information System GET Parameter sql injection

EPSS 0.8%CVSS 9.8

Tongda1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-2738 · Tongda OA

Tongda OA GatewayController.php actionGetdata unrestricted upload

EPSS 0.9%CVSS 9.8

anuko2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-32306 · anuko timetracker

Time Tracker has Blind SQL Injection Vulnerability in Reports

EPSS 0.7%CVSS 9.8

CVE-2023-32308 · anuko timetracker

SQL Injection Vulnerability in anuko timetracker

EPSS 0.7%CVSS 9.8

SICK AG1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-23450 · SICK AG SICK FTMG-ESD15AXX AIR FLOW SENSOR

Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120…

EPSS 0.7%CVSS 9.8

greenplum-db1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2023-31131 · greenplum-db gpdb

Arbitrary File Write when Extracting Tarballs in greenplum-db

EPSS 0.7%CVSS 9.1

google_android1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2021-0877 · google_android

Product: AndroidVersions: Android SoCAndroid ID: A-273754094

EPSS 0.3%CVSS 9.8

IBM1 vulnerability on this pageMax CVSS 9.3Priority 31KEV 0

CVE-2023-30438 · IBM PowerVM Hypervisor

IBM PowerVM gain access

EPSS 0.2%CVSS 9.3

The archive.